Re: [cobalt-security] PortSentry 2.0b1 Beta released

["Chris Burton" <chris@xxxxxxxxxxxxxxxxxx>]

----- Original Message -----
From: "Gerald Waugh" <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Wednesday, April 10, 2002 12:28 PM
Subject: RE: [cobalt-security] PortSentry 2.0b1 Beta released


> On Wed, 10 Apr 2002, Graeme Fowler wrote:
> >
> > Well, a cursory glance at the ChangeLog for this version shows that the
most
> > important change of all is that the "Classic", or binding, mode has been
> > removed. That should get rid (I say should... but!) of all the "Help! I
> > scanned my system and I've got X Y and Z trojans on my system" messages
we
> > see here on a reasonably regular basis.

> I use to use portsentry but have given up on it. For one thing it keeps
> a bunch of ports open that I don't use anyway, so it's kind of like
entrapment
> you catch people trying to access ports on the machine that are not in use
> anyway.
>

With that complaint you are probably running it in classic mode which will
no longer exist (as stated above), it was fairly well documented on how to
get it to not "listen" on unused ports but most people give up when it
doesn't do what they want/expect (no offence intended).

ChrisB.

--
http://ChrisBurton.info/